docs vulnerabilities

2 known vulnerabilities in docs from Sismics. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  docs: Improper Neutralization of Input During Web Page Generation

  CVE-2022-22115Jan 10, 2022SismicsEPSS 1.07%

  In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting (XSS) in the name of a created Tag. Since the Tag name is not being sanitized properly in the edit tag page, a low privileged attacker can store malicious scripts in the name of

• 9.6 Critical severity

  docs: Improper Neutralization of Input During Web Page Generation

  CVE-2022-22114Jan 10, 2022SismicsEPSS 1.34%

  In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS). The “search term" search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. Th